Static task
static1
Behavioral task
behavioral1
Sample
4933fb397bf6b6ea08a9f02e1e0cae8e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4933fb397bf6b6ea08a9f02e1e0cae8e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4933fb397bf6b6ea08a9f02e1e0cae8e_JaffaCakes118
-
Size
176KB
-
MD5
4933fb397bf6b6ea08a9f02e1e0cae8e
-
SHA1
7f870963eac1eec67d53ff75c2d95d306a6d40f5
-
SHA256
2234c6a43622f0422923fdf058ecffeb9b875dbdc819a2fdcb916f2bf51f6252
-
SHA512
75344ad32f8e5d46f9c9889e831324b80121a225188202984abbb06f698df590403052ca0ba4e26a91d241878a865142637a6643af8c87ed37e9f483fc7cf8f2
-
SSDEEP
3072:5wBdYb+TvMcfkkJtbxHq8TmZSNH9TbxXj98TFLrMLofrL9QBt5:5wBdZvMcfkkvbNqeTbxXj98Vr0of39
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4933fb397bf6b6ea08a9f02e1e0cae8e_JaffaCakes118
Files
-
4933fb397bf6b6ea08a9f02e1e0cae8e_JaffaCakes118.exe windows:4 windows x86 arch:x86
6f7bae63eebb0fb074f94659c7e654b5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetModuleHandleA
FlushInstructionCache
VirtualProtect
GetTickCount
GetLastError
GetProcAddress
LoadLibraryA
Sleep
LocalAlloc
LocalFree
VirtualProtect
user32
wsprintfA
Sections
a\.KdPh> Size: - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
\D0mYmKo Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
@m"TaS'' Size: - Virtual size: 548B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ekOc$"K[ Size: - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
!@T!s0PF Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE